Launchpad.net

CVE 2021-42836

GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.

See the CVE page on Mitre.org for more details.